best free encryption sw

bloodhawke83

I Strike Fear into the Hearts of the Masses
Joined
Oct 8, 2010
Messages
8,495
best free encryption sw for storage drive? i just for one folder with many files.

runnig windows 7 64bit
 
Truecrypt. Also, if you have an i5/i7 it will do hardware AES. I'm building a 8 drive Raid 6 tomorrow that will be entirely encrypted w/ Truecrypt. :)
 
I also recommend people use TrueCrypt whole drive encryption on laptops and pc's with sensitive data. In many IT depts Bitlocker is mandatory and there is no reason a home user can't do the same.
 
Will this work on a server with 40TB data on RAID 6? Will i need to wipe the partition and then make a container or can it encrypts the whole drive with data on it?
 
What does truecrypt do if you get a silent bit error on one of your drives containing a large truecrypt file? Is the whole truecrypt file corrupt?

Something to think about before making one huge 40TB truecrypt file.
 
TrueCrypt is capable of encrypting existing data. Also, regarding data corruption, this is from their faq:

What will happen when a part of a TrueCrypt volume becomes corrupted?

In encrypted data, one corrupted bit usually corrupts the whole ciphertext block in which it occurred. The ciphertext block size used by TrueCrypt is 16 bytes (i.e., 128 bits). The mode of operation used by TrueCrypt ensures that if data corruption occurs within a block, the remaining blocks are not affected. See also the question 'What do I do when the encrypted filesystem on my TrueCrypt volume is corrupted?


What do I do when the encrypted filesystem on my TrueCrypt volume is corrupted?

File system within a TrueCrypt volume may become corrupted in the same way as any normal unencrypted file system. When that happens, you can use filesystem repair tools supplied with your operating system to fix it. In Windows, it is the 'chkdsk' tool. TrueCrypt provides an easy way to use this tool on a TrueCrypt volume: Right-click the mounted volume in the main TrueCrypt window (in the drive list) and from the context menu select 'Repair Filesystem'.

It is a very impressive little app....

Also, on my array I plan on having the controller scrub it once every two weeks or so.
 
Last edited:
my work laptop has some built-in AES like bios encryption so whatever HDD you put in it is automatically encrypted. you have to enter a password to get in.

doesn't really work when you have 5000 people that can access your laptop since its open cube. my backup often write my password on a paper and leave it on my desk so anyone could get in. it has fail written all over it since no one follows policies at work, i have a lot of access to computer information (corp customers).
 
TrueCrypt is capable of encrypting existing data. Also, regarding data corruption, this is from their faq:



It is a very impressive little app....

Also, on my array I plan on having the controller scrub it once every two weeks or so.

It truly sound like a great app. This was something i was worried about also. How do did you set up that "scrup" what is the technical name for that? i have adaptec controller if that important.

Also you say that it can encrypt exiting data, how is that done, not a container i presume?
 
It truly sound like a great app. This was something i was worried about also. How do did you set up that "scrup" what is the technical name for that? i have adaptec controller if that important.

Also you say that it can encrypt exiting data, how is that done, not a container i presume?

it creates a container file and you mount it like a virtual drive, asks for password and then it shows up as a hard drive. i transfered all my files i wanted protected and then dismount it.
 
Aside from creating a new container and placing the files inside of it, you can encrypt an entire existing partition, even one that has an operating system on it. To encrypt just a storage partition you use Create Volume --> Select the volume type you want --> Select Device --> Select the partition you want to encrypt --> Encrypt partition in place --> then select your encryption scheme
 
Oh it dosent work for win 2008/2008r2?

Latest Stable Version - 7.0a

Windows 7/Vista/XP/2000

I guess i will not be using that for my server then.
 
You guys are scaring me running encryption on servers
What if something crashes and you need to recover using another system?
 
As indicated by my quote from their FAQ earlier, TrueCrypt is highly resilient to corruption. Only the data contained in a bad block is lost, the rest can still be decrypted. In my case I use pre-boot encryption for the OS, which is on it's own drive, and a separate encryption scheme for the data in the array. I am basically unconcerned with the server OS anyways, it is easily re-installed and configured.
 
I wish TC had the ability to share an encrypted drive across the network and mount it on the client. It's only supported for file containers.
 
I wish TC had the ability to share an encrypted drive across the network and mount it on the client. It's only supported for file containers.

mount then samba/windows share.

OR you can use tc and a software iscsi target.

edit: starwind for windows, scst or IET for linux.
 
I wish TC had the ability to share an encrypted drive across the network and mount it on the client. It's only supported for file containers.

opening up avenues of unencrypted access would seem to defeat the point, and tunneling the encryption out to clients may not be feasible from a performance perspective, on top of the logistical reasons its not a good idea.
 
Last edited:
Back
Top